Amazon.com is a global e-commerce website. Traffic specific to Amazon Prime Video get classified as amazon_video, also Amazon Music as amazon_music.

Kids360 is a parental control application.

Meta AI is a Meta Platforms division which develops artificial intelligence and augmented reality technologies.This plugin classifies the traffic of the Meta AI website browsing and the Meta AI Assistant website which using Llama language model.

Wire is an instant messaging application developed by Wire Swiss.

gRPC is a remote procedure call (RPC) framework for APIs and distributed systems.

NetSupport provides educational and corporate software solutions.

NetSupport Manager is a remote desktop control application developed by NetSupport Ltd.

Qustodio is a parental control application.

ElevenLabs provides AI voice tools for text-to-speech, voice cloning, and dubbing across various applications.

Cloudflare 1.1.1.1 WARP is a VPN for consumers allowing to relay traffic through Cloudflare’s without selection of the exit country. Zero Trust, part of Cloudflare One, is the Enterprise version

Google NotebookLM is an AI-powered tool that organizes and summarizes research sources.

Perplexity is an AI-powered chatbot.

JusTalk is an instant messaging application.

Milvus is an open-source vector database for building AI applications. This plugin will also classify the website.

Holafly is an eSIM provider.

WebTorrent is an adaptation of BitTorrent protocol to the web protocols. This plugin classifies traffic to the tracker and Webseed hosted files.

Zello is a Push-To-Talk application.

Tunnelmole is a tunneling service provider which provides a public URL to a privately running service.

SayGames is a games publisher.

My Prefect Hotel is a video game edited by SayGames.

Ubiquiti is a network equipment manufacturer. This plugin classify the official website and the UniFi product line.

Scopely is an interactive entertainment and mobile video game company.

Photon Engine provides software developement kits for online multi-player games and mutli-user applications.

Stumble Guys is a multi-player online video game edited by Scopely.

The Compression Control Protocol (CCP) is responsible for configuring data compression algorithms on a point-to-point link.

The DNS protocol is used to translate internet names (www.site.com) into IP address and vice versa. This protocol plug-in classifies DNS and its 'children' LLMNR, mDNS and DNSSEC (RFC 4033, RFC 3225), which are recognizable by the value of the Q_DNS_NAME_RESOLUTION_TYPE attribute. [ dns is also known as llmnr.]

The FTP protocol is used for reliable data transfer between a client and a server.

Gmail is the Google webmail service. This plugin also classifies Gmail image proxy server. Google Inbox is now part of Gmail.

Google Maps can be used to calculate routes and to look at maps. The encrypted traffic is classified as google. This plug-in also classifies the traffic destined to the Google Location service or third-party applications using its API, to locate a device.

The Hypertext Transfer Protocol (HTTP) is used for browsing the web.

The IMAP protocol (Internet Message Access Protocol Version 4) enables a client to access and manipulate electronic mail messages on a server.

The IPsec protocol suite includes Encapsulation Security Payload (ESP) and Authentication Header (AH) protocols.

The Internet Security Association and Key Management Protocol (ISAKMP) defines procedures and packet formats to establish, negotiate, modify and delete Security Associations (SA).

Layer Two Tunneling Protocol (L2TP) is an extension of the Point-to-Point Tunneling Protocol (PPTP) used by an Internet service provider (ISP) to enable the operation of a virtual private network (VPN) over the Internet.

LDAP (Lightweight Directory Access Protocol) is a protocol used for accessing directory services. Windows environments use this protocol to send queries to Active Directory. [ ldap is also known as cldap.]

The RSH protocol allows a user to establish a secure connection to a remote host and to obtain a shell allowing commands to be sent to the remote machine to be executed.

RTP is the real-time transport protocol used to transmit real-time data, such as audio, video or simulation data, over multicast or unicast network services. This signature also classifies the SRTP and ZRTP encrypted transport protocols. [ rtp is also known as zrtp and srtp.]

Skype is an instant messaging and voice over IP application edited by Microsoft. [ skype is also known as skype_for_business.]

The Simple Mail Transfer Protocol (SMTP) is a protocol used to transfer emails reliably and efficiently.

Secure Shell (SSH), sometimes known as Secure Socket Shell, is a UNIX-based command interface and a protocol for obtaining secure access to a remote computer.

Secure Sockets Layer (SSL) is a commonly-used protocol for managing the security of a message transmission on the Internet. SSL has recently been succeeded by Transport Layer Security (TLS), which is based on SSL.

Syslog protocol is used for the transmission of event notification messages across networks between a client and a server.

Telnet provides a fairly general, bi-directional, eight-bit byte oriented communications facility. Its primary aim is to provide a standard method of interfacing between terminal devices and terminal-oriented processes.

Youtube is a website where users can send or watch videos.

Facebook is a social network.

American website with a search engine which lists answers to internet users questions.

Expedia Inc. is an online travel agency.

WordPress is a popular blogging system. This plug-in classifies the usage of Wordpress.com blog hosting online service.

Image hosting and sharing website with social and blogging services.

This protocol plug-in classifies the generic traffic related to Apple's web portal and content delivery services.

Deezer is a french music streaming service which can run in web browsers and mobile applications.

Zimbra provides open source server and client software for messaging and collaboration.

This network protocol is used for validating certificates.

OpenVPN is an open source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities.

Vtunnel is a WEB proxy allowing the user to bypass firewalls and access restricted resources. This plug-in classifies the HTTP tunneled sessions, including both vtunnel and the tunneled application. When using HTTPs, the Vtunnel service may connect to the Freeproxies.org proxy: the corresponding sessions are then classified as freeproxies.

This protocol plug-in classifies the http traffic to the hosts proxono.org and proxono.info.

This protocol plug-in classifies the http traffic to the host proxeasy.com.

Megaproxy is a free anonymous proxy surfing service.

KProxy is an anonymizing proxy used for private browsing, firewall bypassing and evasion. This signature classifies both the web proxy usage and the KProxy browser extensions.

Avoidr is a free web proxy.

Elftown.com is the Elf Town Galway and Dublin website.

This protocol plug-in classifies the http traffic to the host fetlife.com. It also classifies the ssl traffic to the Common Name fetlife.com.

Odnoklassniki is a Russian social network.

Online microblogging service that enables its users to read and send text-based short messages.

VK, or VKontakte, is a Russian social network edited by the VK Group.

Wasabi is a cloud storage platform.

Spotify is an application of musical streaming.

This protocol is used for sending user queries to the Bing search engine.

Ventrilo is a low-latency, encrypted voice chat software primarily intended for use while gaming.

Viber is a free embedded voice over-ip application, for smartphones.

HTTP Tunnel protocol is used to tunnel protocols inside an HTTP stream.

Dropbox is a free in-the-cloud file storage and synchronization service providing both web and smart application interfaces. Note: any dropbox traffic that is encrypted will be classified as dropbox and not dropbox_upload or dropbox_download. Dropbox file upload/download can occur across multiple sessions, so a Q_MPA_FILE_GEN_* attribute can be raised in multiple flows for the same file. User applications can correlate extracted attributes using Dropbox's Q_MPA_FILE_GEN_ID attribute.

Sveriges Television video-on-demand website.

GoToMeeting is an online meeting service developed by Citrix.

WebEx is an online meeting, videoconferencing and collaborative application. Webex is owned by Cisco.

Bloomberg is a website about business and financial news.

GMAIL Drive is a Shell Namespace Extension that creates a virtual file system around a Google Mail account, allowing Gmail as a storage medium. GMAIL Drive is only classified over http and not over https.

Socks2http is a client software aiming to make a tunnel.

This protocol refers to all Blackberry mobile device communications over wifi. This includes the chat flows of BlackBerry Messenger.

This protocol is a generic layer used as a base for all the services running on top of Google platforms.

Addicting Games websites, operated by the American company Defy Media.

This protocol is a generic layer used as a base for all the services running on top of Amazon platforms.

Ikea is a Swedish company that designs home furniture.

nfl.com is the NFL website.

Ntv.co.jp is the Nippon TV website.

NYTimes.com is the website of The New York Times daily.

Reverso.net is an online translation platform.

Sky is a British media and telecommunications conglomerate. This protocol plug-in classifies the access to the website.

Stayfriends is a social network.

Vimeo is a high definition video streaming platform, to be accessed from a web browser or mobile applications.

WhatsApp Messenger is a cross-platform, instant, mobile messaging application which allows the users to exchange messages without having to pay for SMS. WhatsApp Messenger is available for iPhone, BlackBerry, Android and Nokia and yes, those phones can all message each other.

GhostSurf is an internet privacy application.

Line is a Japanese Instant Messaging and Voip application for smartphones and PCs. Please note : the parent attribute 'call' and its children are deprecated for Line (since mid-2014) but can be extracted from SIP.

Hulu is a free Video-On-Demand and video sharing service.

Instagram is an online mobile photo-sharing and social networking service. Instagram Direct calls are classified as facebook_messenger.

SoundCloud is an online audio distribution platform where users can upload, promote and share their sounds with others.

Amazon AWS is a cloud-computing platform offered by Amazon, that includes Amazon Elastic Compute Cloud (EC2) and Amazon Simple Storage Service (S3).

News websites and web services belonging to a famous newspaper in South Korea, Chosun Ilbo.

Donga is a South Korea daily newspaper.

Segye.com is a Korean newspaper website.

This protocol plug-in classifies the http traffic to the host sportsseoul.com.

Website of one of the most famous banks in South Korea.

Nexon is a South Korean video game publisher.

Ultrasurf is a tunneling protocol used by the Ultrasurf software for Windows. The classification is based on an IP address range analysis.

Amazon Prime Video is an online video on demand service owned and operated by Amazon.

Chinese news website.

People.com.cn is the official newspaper of the Central Committee of the Chinese Communist Party.

Facebook Applications. This plug-in classifies user access to the Facebook Applications platform, and the launching of applications. The flows generated by the applications themselves may not be classified as facebook_apps.

Zynga is a social network oriented on-line video games editor.

DTLS stands for Datagram Transport Layer Security protocol. It provides communications privacy for datagram protocols, and prevents eavesdropping, tampering, or message forgery.

WeChat is a text and voice messaging application for mobile. This plug-in classifies file transfers, chat and audio/video calls. Tencent is the owner of QQ and Wechat

Youni SMS is a totally free mobile messaging application.

Rakuten is a japanese conglomerate, this plugin also classifies the online market place for selling goods and auctions.

Japanese adult videos web site

Japanese web portal and search site

Japanese IT news web site

Chinese news portal.

Chinese entertainment portal.

This signature classifies part of the flows related to the Google IM and audio/video calls applications both for PC and mobile devices. The Google Meet, Google Hangouts, Google Allo, and Google Duo applications are partially classified by this signature. The RTP audio/video flows of Meet, Hangouts, and Duo are classified using DNS Caching and STUN metadata. [ gtalk is also known as google_hangouts, google_allo and google_duo.]

CloudFlare CDN is a content delivery network with advanced security and analytics features. Cloudflare also provides a DDoS prevention tool.

Zoho is a software development company providing online office suite named Zoho Office Suite.

Social networking web-service available on PC and mobile devices.

American news website/resources about sports.

On-line service that allows users to attach personal elements on some kind of pinboard.

Social news website.

On-line file storage and sharing web-service by Google. Important: most of the traffic is encrypted with generic Google certificates. The classification of this service then needs non-encrypted traffic to be injected. Classification is also correct for traffic under a proxy and some limited workflows. [ google_docs is also known as google_drive.]

ITV is an English TV broadcaster. This plugin classifies the website and mobile applications for VOD content (TV catch up) and live channels streaming.

Bitcoin is a distributed payment system.

Online payment services

uCoz is a free web hosting with a built-in content management system.

Czech e-commerce website

Dutch advertising site where you can sell, new and second-hand goods.

The Hotspot Shield application secures internet connections made from public access points using a VPN network.

Hamachi is a VPN service provided by LogMeIn. This signature classifies traffic to the LogMeIn servers used by Hamachi. The P2P VPN streams between users are using IPSEC, and won't be classified as hamachi, but ipsec instead.

Proxy hosting service (redirector and anonymizer) that uses the CGI Proxy script. Main features are SSL support and Youtube.com video streaming proxying. It hosts several proxy websites, like Vtunnel.com.

OpenGW (aka VPN Gate) is a Public VPN Relay Servers service, used in several VPN solutions (example: PacketiX. This service uses the SoftEther VPN technology.

Gbridge is a free software that lets you remotely control PCs, sync folders, share files, and chat securely.

ASProxy is a free and open-source web proxy which allows the user to surf the net anonymously. This plug-in classifies the usage of this proxy for web browsing, as a fallback to other recognized applications/protocols.

Indonesian mobile telecommunications services operator web portal.

Brazalian news portal

Classified ads website.

Belarusian ecommerce website

FNB (First National Bank) banking website.

Irish banking website

Crotaian news portal

Snapchat is a photo/video sharing service. This plugin also classifies Snap Kit web interface.

Iranian multimedia website

Telegram is an instant messaging protocol like Whatsapp. This plugin also classifies traffic generated by Telegram API embedded by telgram.org web site.

F-Secure Corporation is a Finnish computer security company

Gen Digital Inc (formerly Symantec Corporation, then NortonLifeLock Inc.) makes security, storage, backup and availability software. This plug-in only classifies generic web transactions from Norton and other Symantec products.

Samsung is a South Korean multinational company.

Software that creates virtual tunnels over TCP/IP networks.

Twitch.tv is a live video streaming service focused on video games.

Facebook Messenger is a text and voice messaging application for mobile devices, and also a web application for desktop or mobile web browsers. Facebook Messenger provides both text chat and audio/video communication. On mobile devices, this plug-in classifies Audio flows, Video flows, as well as Text Chat-related flows. On the web application, when running Internet Explorer, this plug-in only classifies the browsing and chat flows. On all platforms, photos and file transfers are classified as facebook. This plugin also classifies the Lasso application.

Zalo is a vietnamese mobile IM application created by VNG Corporation with audio/image file send feature. The HTTP/HTTPS traffic generated by this application may either be classified as Zalo or Zing.

Czech republic localization website.

Vpnoverdns is a solution which provides tunneling through the standard DNS protocol.

Iodine is a solution which provides tunneling through the standard DNS protocol. This plugin classifies only raw UDP mode and some DNS Resource Records (NULL, PRIVATE, CNAME, A, MX, SRV and TXT) in bidirectional mode.

AICCU (Automatic IPv6 Connectivity Client Utility) is a cross-platform utility for automatic IPv6 tunnels configuration, initially released in 2004 and available under a BSD license.

Classified ads website.

CCProxy is a windows based software proxy.

My Pocket is a service that enables the user to send his smartphone data into the personal cloud. Data storage and sharing among users form part of the services provided. On the smartphone, there's an application to manage photos, videos, address book, and can be accessed via the WEB browser from a computer over the internet.

Srilankan news portal

Kenyan mobile and internet service provider website.

QUIC is an open networking protocol developed primarily at Google for transporting web content.

Australian Footy League website

HTTP/2 is the second major version of the HTTP network protocol used by the World Wide Web.

Facebook Embedded Video is a Facebook service allowing to watch, upload and share videos. This signature also classifies the live video play feature, aka Facebook Live.

Bahamian banking website.

Atlas Solutions is a subsidiary of Facebook which provides services in online advertising.

Net::Proxy is a framework for creating various kinds of network proxies in a very simple way. This plugin only classifies flows created with the connect-tunnel script of the Net::Proxy project.

HideMyAss is a popular anonymizing web proxy.

This signature detects generic connections to remote control, remote assistance and VPN servers managed by LogMeIn. It covers usage of products like LogMeIn Central, Rescue, Backup, Hamachi, etc.

Threema is an instant messaging mobile application focused on confidentiality.

ZenMate is a web-browser extension that provides VPN-like protection.

Multiplatform and non restrictive app store for mobile devices.

Xcams is an adult webcam website.

OneDrive (previously SkyDrive, Windows Live SkyDrive, and Windows Live Folders) is a file hosting service. Important: most of the traffic is encrypted with generic Microsoft certificates. The classification of this service then needs non-encrypted traffic to be injected.

MODBUS is a standard communication protocol in industry for connecting industrial electronic devices (SCADA). Here, we consider MODBUS as the combination of MODBUS/TCP (Transport layer for TCP/IP networks) and MODBUS (serial communication protocol).

Chinese website providing articles on topics such as communication, lifestyle, work, money, health or technology.

Free web proxy enabling users to browse the web without censorship or bandwidth throttling.

VPN service which offers to protect the Internet connections of its users. This signature only classifies the Windows version of the application.

FBCDN is the Facebook Content Delivery Network (CDN) service, mostly used for static content access such as photos.

DNP3 (Distributed Network Protocol) is a set of protocols used between components in process automation systems (SCADA).

TV channel webportal from Malta, featuring live streaming.

Signature which classifies user access to the Bank of America online service.

Uber is an American online transportation network company which connects smartphone consumers looking for a trip with drivers.

The Common Industrial Protocol (CIP) is an industrial protocol for industrial automation applications.

Conversant is an online advertising company.

Zoom Video Conferencing, also referred to as Zoom by users, combines video conferencing, online meetings, and mobile collaboration into one platform.

Weborama is specialized in marketing data collection, and advertising campaigns online broadcasting.

CoAP (Constrained Application Protocol) is a specialized web transfer protocol for use with constrained nodes and constrained networks in the Internet of Things.

Indicates that a flow is proxied through HTTP CONNECT mechanism.

Innovid is a video platform for advertisers to measure video experience (QoE) on several devices.

IMO is a instant messaging application which allows the users to exchange messages without having to pay for SMS, share photos and videos.

Amazon Music is an online music store.

Free live video streaming service by Facebook. This signature only classifies the live video streaming making (upload) from the official Facebook mobile application. The live video watching is classified as facebook_video.

Kundo offers simple and powerful tools for customer service.

Japanese multinational video game company.

Chinese group buying website selling vouchers on local services and entertainment.

Popular banking web portal in South Pacific.

Mobile application from Vodafone allowing mobile network performance benchmark and data usage follow-up.

Dns2tcp is a solution which provides tunneling through the standard DNS protocol.

Amplitude is a web and mobile analytics platform.

PTT is a taiwanese BBS website (Bulletin Board System).

Kahoot! is a free game-based learning platform.

Google Cloud Platform is a suite of cloud computing services that runs on the same infrastructure that Google uses internally for its end-user products.

Dcard is a social network application on mobile devices.

Television Broadcasts Limited is a Hong Kong audio-visual group. This plugin classifies only website browsing.

Workplace by Facebook is a social network for enterprises. Workplace by Facebook is mostly classified as Facebook on mobile devices.

Microsoft Teams is the chat-based workspace in Office 365. Most of the application traffic is classified as skype or office365.

Facebook Lite is an official Facebook client that allows to use this popular social network through a much lighter app.

Apache Thrift framework used for serialization.

x-vpn unblock the web securely, privately and anonymously on your Android devices. x-vpn was formerly FastLemon VPN

YouTube Kids is an application providing a family-friendly version of YouTube for younger children, with parental control features and video filter. This plugin classifies traffic specific to the website. Mobile applications traffic and video playing traffic are classified as youtube.

Hexatech is an anonymous VPN software released by Betternet (formerly vpnintouch) company. Betternet was bought by AnchorFree in 2015.

Fortnite is a game developed by Epic Games.

AnchorFree/Pango is a company that owns several popular vpn software and sells vpn solutions.

epic_games is an American video game and software development corporation.

vpn1.com is a website hosting two popular anonymizing web proxies: Hoxx VPN and setupvpn

TunnelBear VPN is a desktop application and browser extension that provide VPN.

This plugin classifies traffic relative to VPN applications distributed by SpringTech company (namely Guangzhou Quanyong Information Technology Company), like Hot VPN, Turbo VPN, VPN Robot, Snap VPN, VPN Master Pro, VPN Monster, VPN Master.

ByteDance is a Chinese company that publishes several applications including TikTok (aka Musically), BuzzVideo and Vigo Video. This plugin classifies traffic from web site.

TikTok is a social network application acquired by ByteDance and previously known as Musical.ly. It allows its users to share live stream video content.

Appliance edited by Barracuda and providing VPN service. This plugin classifies TINA protocol.

Alibaba Group Holding Limited is a Chinese multinational conglomerate specializing in e-commerce, retail, Internet, AI and technology. This plugin is the default classification of domain names owned by Alibaba Group.

CyberGhost is a VPN service used to unblock sites and browse privately and anonymously.

Discord is a chat, audio and video call application for gaming.

Hideman VPN is an application and browser extension that provides VPN features.

ExpressVPN is a provider of VPN tunnels with servers located in over 140 countries, a wide range of supported clients, and several standards or obfuscated protocols. This plugin classifies the website, the provided software, and manual setups using the ExpressVPN's provided configuration file.

Account Kit is a product of Facebook that lets people quickly register for and log in to some registered apps by using just their phone numbers or email addresses without needing a password.

Tim is an Italian telecommunication company. This plugin classifies the website browsing.

Monday.com is a collaboration solution for enterprise.

Wish is an e-commerce website and application.

Opera VPN is a feature provided by Opera Web Browser. This feature provides VPN functionalities.

AnonyTun is an android VPN client offering to their users to customize a few parameters related to tunnel.

Didi Global is a chinese company. This plugin also classifies traffic from Didi and 99Taxi transportation applications.

Apex Legends is an online shooting video game available on PC and consoles (ps4, xbox one), published by Electronic Arts.

Google APIs is a set of application programming interfaces (APIs) developed by Google which allow communication with Google Services and their integration to other services.

Crypto browser integrates a web application 'Crypto Tab' to mine Monero (XMR) and to be rewarded in Bitcoin. This software also seems to install two malware (Redirector.gvt1, Msftconnecttest). It runs its own 'CleanBrowser' search engine visually comparable to the Google search engine.

Mining pool for cryptocurrency named Monero (blockchain).

Mining pool for cryptocurrency named Monero (blockchain).

Mining pool for cryptocurrency named Monero (blockchain).

Mining pool for cryptocurrency named Monero (blockchain).

Classification of traffic related to cryptocurrency Monero (XMR) mining and web traffic from web site.

Tweakware is a vpn application.

Windscribe is a desktop application and browser extension that provide VPN and Ad blocker features.

DuckDuckGo is an Internet search engine and a web browser for mobile devices

Eproxy is a VPN for forward proxies with custom payload and optional ssh support. This plugin classifies automatically generated fake HTTP headers and the embedded ssh clients.

Ripple is a cryptocurrency but unlike other cryptocurrencies it is not based on a block chain. RippleNet design is more centralized.

Google Pay is an application that centralizes payment cards, loyalty cards, and gift cards. Payments can be made on line or in stores through NFC (Near Field Communication).

Bumble is social networking and dating application.

Talkatone is an instant messaging application that provides international call feature.

Wireguard is an open-source VPN protocol designed to be lightweight. The website is classified too.

Stark VPN is a vpn application.

This plugin classifies WebTunnel VPN software edited by TunnelGuru and its website.

Ethereum (ETH 1.X) is a cryptocurrency based on a decentralized blockchain with Proof of Work (PoW). This plugin handles version 63 (Eth/63) of Ethereum Wire protocol and traffic to its official web site.

Agora SDK is a WebRTC framework.

Facebook games is a feature to play games and discover apps on Facebook. This plugin does not classify traffic that may be generated by games/applications to their own servers.

Browsec VPN is a set of mobile applications and web browser extensions providing non-professional VPN service. This plugin classifies the browser extension and mobile applications. Applications may generate ISAKMP/IPSEC traffic.

This protocol classifies common mechanisms used by evasive applications. Those mechanisms can be shared by several different applications.

Shopify is an online service to build e-commerce websites.

KPN is a VPN over HTTP proxy and SSH with custom HTTP payload injection.

Epic Browser is a privacy-centric web browser edited by Hidden Reflex. This plugin classifies the VPN extension provided with this browser.

This layer classifies traffic from TCP/3422 related to actual data carried out by AnywhereUSB devices connected to it. Those data are in clear text.

Arena of Valor is a multiplayer online battle arena (MOBA) mobile game.

Zerotier is a peer-to-peer VPN for establishing a SDN over the Internet.

The Blaze is a news and opinion website. This plugin classifies browsing of home page http://theblaze.com.

Nvidia is technology company. This plugin classifies website traffic.

The Walt Disney Company, commonly known as Disney is an American diversified multinational mass media and entertainment conglomerate. This plugin classifies website traffic.

DigiCert is a digital security company.

Riot Games is a videogame company, and has developed games like League of Legends, Valorant, etc... This plugin classifies website traffic.

Let's Encrypt is a free SSL/TLS certification authority. This plugin classifies website traffic.

This plugin classifies website traffic of nework.app. NeWork is an online workspace that supports team communication that is provided by NTT Communications (meetings use Jitsi services).

HubSpot is a CRM provided as a SaaS, that can be integrated on a website, including chat and marketing emails.

iCloud Private Relay is a VPN feature provided with iCloud+ for web browsing using Safari web browser.

HA Tunnel is an android VPN client that offers the possibility to customize parameters related to tunneling. This application is developed by Art Of Tunnel. Similar applications like HA Tunnel Pro and HA Tunnel Lite may be classified by this plugin.

IPVanish VPN is a VPN service provider.

Wire Tun is a VPN service provider offering evasive or fraud capabilities.

DotVPN is a VPN service provider. This plugin classifies the free plan.

VPN by Google is a VPN offered in the Android system of Pixel 7 and above smartphones. This replaces Google One VPN that have been discontinued in June 2024.

This protocol is a generic layer used as a base for all the services and applications provided by the company Meta (formerly known as Facebook).

NDS authentication is the process of proving one's identification to Network Domain Security. Authentication is accomplished by having an object in the NDS tree represent the user requesting access. This object contains or has access to all of the pertinent information about the user (i.e., password signature, encryption keys, etc.) that NDS needs to prove that users communicating from client machines are who they say they are.

The Time-Stamp Protocol (TSP, PKIX-TimeStamp) is a cryptographic protocol for certifying timestamps using X.509 certificates and public key infrastructure. The timestamp is the signer's assertion that a piece of electronic data existed at or before a particular time.

USPS - US Postal Service website. This plugin classifies browsing of home page http://usps.com

Automatic Certificate Management Environment (ACME) automatically provision TLS certificate from a Certificate Authority. This plugin classifies REST servers from major providers; and the HTTP/DNS challenge.

Tantan is a Chinese dating application. This plugin classifies website and mobile application browsing traffic.

NordVPN is a VPN service distributed by Nord Security.

Aloha VPN is a VPN service distributed by Aloha Mobile.

iTop VPN is an anonymizing VPN edited by iTop Inc.

Gab is an American microblogging and social networking service.

Melon VPN is an anonymisation VPN service provider.

Hotspot VPN is an anonymisation VPN service provider.

Binance is a cryptocurrency exchange platform. This plugin classifies the browsing traffic of the website and mobile applications.

Free VPN is an anonymizing VPN service provider.

Check24 is a German comparison application.

CRYPTOAdmin is a remote authentication solution, enabling its users to access a remote enterprise's LAN. The solution is built of two parts: the CRYPTOAdmin authentication server and CRYPTOCard tokens and smart cards. Together, these provide strongly secured access to a remote enterprise network.

A key server is a computer that receives and then serves existing cryptographic keys to users or other programs. The users' programs can be working on the same network as the key server or on another networked computer.

EC Tunnel Pro VPN is an anonymizing VPN service provider.

Zcash (also known as Zerocash or ZEC) is a cryptocurrency, forked from the Bitcoin protocol with additional privacy extensions. This plugin classifies the Zcash protocol which might also be used for other derived cryptocurrencies.

Google Gemini, the successor of Google Bard, is an AI-powered chatbot solution that uses machine learning and natural language processing to mimic human interactions. This plugin classifies Gemini’s website, mobile application and developers API. [ bard is also known as google_gemini.]

SoftEther VPN is a VPN client and VPN server software. This plugin classifies the traffic between SoftEther VPN Client and SoftEther VPN Server.

Threads is a Meta social media platform developed by the Instagram team and designed to be a space where users come together in order to discuss different topics. This plugin classifies the website access and the visualization of user posts.

tinc is a Virtual Private Network (VPN) daemon that uses tunnelling and encryption to create a secure private network between hosts on the Internet.

4everproxy is a secure web proxy and a VPN application.

Wire VPN is a VPN application.

Better VPN is an anonymizing VPN.

VK Group, former Mail.ru group, is a Russian social network editor. Their services includes VKontakte, Mail.ru, and Odnoklassniki.

Statista is a portal providing statistics, market data, and market research across various industries and countries.

South by Southwest (SXSW) are Conferences & Festivals, celebrating tech, film, music, and culture.

GoFundMe is a crowdfunding platform where individuals can raise money for personal causes and projects.

Chisel is a tunneling application maintaining an SSH connection over HTTP.

Dell is an IT and hardware solutions provider.

Digitaleo is a marketing automation software that helps businesses manage and optimize their marketing campaigns.

Zomato is an online platform that provides information, menus, and user reviews of restaurants.

Vice is a digital media company covering news, culture, and entertainment.

Coinbase is a cryptocurrency trading platform.

FileZilla is a free software, cross-platform, file transfer FTP, FTPS, SFTP application. This plugin classifies the website.

JetBrains is an Integrated Development Environment (IDE) editor and created the Kotlin language.

Kraken is a US-based cryptocurrency exchange.

LG Corporation is a South Korean multinational conglomerate corporation.

Public Broadcasting Service(PBS) is an American public broadcaster and television program distributor.

Python is a high-level programming language. This plugin classifies the website.

The Sun is a British tabloid newspaper, also available in the US, Scotland and Ireland.

AirVPN is an OpenVPN and WireGuard based VPN.

Rakuten Travel is an online travel agency in Japan from Rakuten Group.

Rakuten Pay is a mobile payment application from Rakuten Group.

Blockchain.com, formerly Blockchain.info, is a cryptocurrency wallet and blockchain explorer service.

DeepL is an AI-powered translation service.

Fortinet FortiClient integrated TLS VPN feature is classified by this plugin.

Hushmail provides encrypted email, web forms, and e-signature services.

Anonymous VPN is a VPN service provider.

Antivirus update

Background service

Application/Protocol used to transport audio or video content

Protocol used for authentification purposes

Protocol classified by non-deterministic criteria based on statistical analysis of packet form and session behavior.

Compression layers

Protocol used for database remote queries

Encryption protocol

Enterprise Resource Planning application

File transfer protocol

Protocol used for user-to-user file transfers via Instant-Messaging applications.

Web forum

Gaming protocol

Instant messaging application

Email exchange protocol

Microsoft office sub-protocol

Platform protocol for remote procedure calls

Protocol used for IT management

Low level network protocol

Peer to peer application

Printer commmunication protocol

Network routing protocol

Workstation security application

Basic layers defined by Qosmos

Telephony core network protocol

Remote terminal protocol

Remote control protocol

Tunneling protocol

Mobile specific transport protocol

Generic web traffic

Web email application

Custom Family